Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File:                     JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier:          RYhMYGrf4g+7wMYcCLtiEJVrW2kc+pfWItfueaT1A9Q=
Subject key identifier:   90:0A:BA:81:9A:91:C9:54:35:EC:12:38:A0:56:1E:CB:13:6F:3D:8C
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer:       /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial:       019F94A4D0675BA260BD90DE6FD143FDBB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 15:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:56 +0000
Files and hashes:         1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: Kyj+MEqzv0kRX4O9axx9tMdHu8SQy19vLH2uo0cTlcU=)
                          2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:d0:67:5b:a2:60:bd:90:de:6f:d1:43:fd:bb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
        Validity
            Not Before: Jul 24 15:00:56 2026 GMT
            Not After : Jul 25 15:00:56 2026 GMT
        Subject: CN=900aba819a91c95435ec1238a0561ecb136f3d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:59:70:bc:c0:db:f8:1a:fd:73:60:80:ad:
                    f3:f9:07:cb:c8:8b:50:e8:09:5c:a9:0c:da:c1:e4:
                    a4:05:61:88:e8:89:8c:19:df:16:83:79:6b:9b:65:
                    0b:86:3e:68:fa:65:ad:a2:18:c1:ee:b2:4b:fb:fb:
                    20:e1:0f:94:52:76:9b:e5:8c:cf:ec:e2:79:a6:76:
                    9b:75:63:b1:40:62:e4:38:50:1e:5e:27:36:c7:6d:
                    6f:ce:ea:40:c0:f3:0c:d7:7a:ba:48:45:ca:fb:ca:
                    20:c5:20:ea:7d:4c:38:97:bc:d4:03:d0:1c:5a:60:
                    c2:78:95:03:a8:66:4d:e1:e2:f3:8a:dc:4b:04:35:
                    8b:7f:ca:31:ac:c8:6c:b1:f4:dc:c2:37:9d:b9:e5:
                    ab:70:14:b6:4a:fc:ea:ab:66:8c:83:97:fb:86:d0:
                    1a:ff:fa:32:4c:ec:aa:0a:23:c4:a4:ba:bb:5a:ad:
                    82:a4:4f:ad:56:17:7d:fc:00:77:17:c0:8a:40:68:
                    b8:7b:00:d3:de:32:35:d8:d0:e4:d9:7b:ff:01:22:
                    7f:c3:55:ee:0e:ab:81:c7:0d:f7:7d:88:7a:10:d7:
                    c7:dd:58:94:54:69:df:1c:fa:eb:93:9c:19:ed:97:
                    56:5e:28:6e:41:79:aa:ca:ab:f2:26:35:df:57:f5:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0A:BA:81:9A:91:C9:54:35:EC:12:38:A0:56:1E:CB:13:6F:3D:8C
            X509v3 Authority Key Identifier:
                keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:6a:f8:51:c5:2c:81:09:64:54:87:e6:34:bf:ac:1b:50:
         d2:26:ae:ae:49:3b:47:01:5d:6f:c7:a8:77:e6:4e:68:0a:b7:
         aa:b6:50:5a:07:32:60:48:17:10:79:f7:03:e0:f7:47:e6:68:
         c1:ce:d2:4c:09:39:33:bb:bc:d5:50:78:1a:6f:83:85:d0:0b:
         ec:8b:9e:c6:90:15:24:97:97:5d:71:c9:3f:8d:7a:2d:52:3a:
         93:78:41:e4:f0:d0:5c:56:fd:30:2b:a2:72:74:7a:35:37:20:
         45:ca:f4:7f:ce:64:64:ba:02:ae:76:d5:43:96:87:f5:44:f5:
         8b:03:ea:62:11:c3:33:91:ed:ae:23:24:a3:b5:5d:ef:9f:0c:
         19:37:9f:63:e8:63:1e:92:74:1b:ca:ec:1a:cd:0f:f4:f3:58:
         8e:a8:22:e4:c7:c9:37:6d:9c:83:db:b2:6c:9b:fb:a6:b9:35:
         a8:ec:6f:94:05:b9:b9:3f:70:85:96:cb:fe:ad:53:8e:2b:5d:
         83:d6:25:b3:5e:be:0c:ef:39:4e:14:48:10:8c:7a:63:db:7a:
         2c:33:dc:0e:ca:2a:7f:ec:06:49:55:e4:51:e8:4f:bf:38:87:
         dd:c4:f6:1a:4d:82:cf:09:33:dc:75:b9:d6:6d:b0:53:c2:23:
         03:b7:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:45 2026 by rpki-client